summaryrefslogtreecommitdiff
path: root/src/Propellor/Property/HostingProvider
diff options
context:
space:
mode:
authorSean Whitton2016-06-12 13:34:23 +0900
committerSean Whitton2016-06-12 13:34:31 +0900
commit5e65dc8abe3237fdc189d8a80d3eb3e193369011 (patch)
treefd6e0e900c8fe70c77bfd32846b33dcec791c302 /src/Propellor/Property/HostingProvider
parentda8b19ea5b31637dd6a05bf662bf636b9c3e4910 (diff)
improve Exoscale prop haddock
Diffstat (limited to 'src/Propellor/Property/HostingProvider')
-rw-r--r--src/Propellor/Property/HostingProvider/Exoscale.hs12
1 files changed, 8 insertions, 4 deletions
diff --git a/src/Propellor/Property/HostingProvider/Exoscale.hs b/src/Propellor/Property/HostingProvider/Exoscale.hs
index 6bf19cbc..c6244d46 100644
--- a/src/Propellor/Property/HostingProvider/Exoscale.hs
+++ b/src/Propellor/Property/HostingProvider/Exoscale.hs
@@ -10,11 +10,15 @@ import qualified Propellor.Property.Grub as Grub
import qualified Propellor.Property.Apt as Apt
import qualified Propellor.Property.Reboot as Reboot
--- | Current Exoshare Debian image doesn't install GRUB, so this property makes
--- sure GRUB is installed and we're running the distro's kernel
+-- | The current Exoshare Debian image doesn't install GRUB, so this property
+-- makes sure GRUB is installed and correctly configured
--
--- We reboot after doing this because 'Sbuild.built' will fail to set up an
--- overlay-type chroot on an old kernel
+-- In case an old, insecure kernel is running, we check for an old kernel
+-- version and reboot immediately if one is found.
+--
+-- Note that we ignore anything after the first hyphen when considering whether
+-- the running kernel's version is older than the Debian-supplied kernel's
+-- version.
distroKernel :: Architecture -> Property DebianLike
distroKernel arch = go `flagFile` theFlagFile
where